CVE-2018-1545

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649...

CVE-2018-1785

CVE-2018-1785 affects IBM Spectrum Protect (formerly Tivoli Storage Manager) in both 7.1 and 8.1 lines for IBM Spectrum Protect Server, Client, and related Virtual Environments components. The vulnerability stems from the use of weaker cryptographic algorithms (notably 3DES) that can permit decry...

CVE-2018-1545

The CVE-2018-1545 issue affects IBM Spectrum Protect family (IBM Spectrum Protect Client and IBM Spectrum Protect for Virtual Environments) where legacy SSL/TLS protocols and weak ciphers could allow decryption of highly sensitive data. The IBM security bulletin clarifies affected versions: Clien...

[SECURITY] Fedora 28 Update: openssl-1.1.0i-1.fc28

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

[SECURITY] Fedora 29 Update: nss-softokn-3.39.0-2.fc29

Network Security Services Softoken Cryptographic Module...

[SECURITY] Fedora 29 Update: python-pycryptodomex-3.6.6-1.fc29

PyCryptodome is a self-contained Python package of low-level cryptographic primitives. It's a fork of PyCrypto. It brings several enhancements with respect to the last official version of PyCrypto 2.6.1, for instance: Authenticated encryption modes GCM, CCM, EAX, SIV, OCB Accelerated AES on Intel...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of verification of the cryptographic signature. Exploiting this vulnerability can allow a perpetrator to disclose protected information using a specially crafted application...

CVE-2018-11291

In Snapdragon Automobile, Mobile, Wear in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD...

Code injection

In Snapdragon Automobile, Mobile, Wear in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD...

CVE-2018-11291

CVE-2018-11291 affects Qualcomm Snapdragon and related IPs (e.g., IPQ8074, MDM9xxx, QCA family, SD/MOD platforms) with a cryptographic RNG that is not strong enough. The issue is described in the CVE as cryptographic issues due to weak randomness in NAN, affecting listed Snapdragon/SoC families. ...

CVE-2018-11291

In Snapdragon Automobile, Mobile, Wear in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD...

[SECURITY] Fedora 27 Update: nss-softokn-3.39.0-1.0.fc27

Network Security Services Softoken Cryptographic Module...

CyberChef - The Cyber Swiss Army Knife [A Web App For Encryption, Encoding, Compression And Data Analysis]

The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression an...

AVM FRITZ!OS < 6.30 Multiple Vulnerabilities

AVM FRITZ!Box devices running AVM FRITZ!OS before 6.30 are prone multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

AVM FRITZ!Box Firmware Signature Bypass

Multiple AVM FRITZ!Box devices are using an improper verification of cryptographic signatures. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 28 Update: nss-softokn-3.39.0-1.0.fc28

Network Security Services Softoken Cryptographic Module...

oBike Electronic Lock Bypass

CVE-2018-16242 - oBike Electronic Lock Bypass Product: oBike bicycle-sharing service Vendor: oBike Inc. CVE ID: CVE-2018-16242 Subject: Access control bypass by replay attack on predictable nonce Effect: Unauthorized unlocking of bikes, cirumventing the ride-fees Author: Antoine Neuenschwander...

Security Bulletin: WebSphere DataPower Appliances is affected by multiple issues

Summary WebSphere DataPower Appliances has addressed the following vulnerabilities: CVE-2018-1447 CVE-2018-1388 CVE-2016-0702 CVE-2016-0705 CVE-2017-3732 CVE-2017-3736 CVE-2018-1428 Vulnerability Details CVEID: CVE-2018-1447 DESCRIPTION: The GSKit CMS KDB logic fails to salt the hash function...

The vulnerability of the encryption module for internal data in Philips e-Alert Unit software solutions allows a intruder to gain full access to the device’s data.

The vulnerability of the encryption module for internal data in Philips e-Alert Unit medical visualization systems arises from the rigid encoding of the cryptographic key used for encrypting internal data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full...

[SECURITY] Fedora 28 Update: python-pycryptodomex-3.6.6-1.fc28

PyCryptodome is a self-contained Python package of low-level cryptographic primitives. It's a fork of PyCrypto. It brings several enhancements with respect to the last official version of PyCrypto 2.6.1, for instance: Authenticated encryption modes GCM, CCM, EAX, SIV, OCB Accelerated AES on Intel...